CLAIMS 

1. A method for preserving confidentiality of an electronic mail from a sender to a 
recipient, comprising: 

authenticating identity information of the recipient; 

restricting the recipient's ability to manipulate the electronic mail based on a 

confidentiality level established by the sender; 
encrypting the electronic mail with the authenticated identity information if 

the recipient attempts to store the electronic mail to a local storage; and 
decrypting the electronic mail if the recipient attempts to retrieve the 

electronic mail from the local storage. 

2. The method according to claim 1, wherein the identity information is a system 

password. 

3. The method according to claim 1 , the method further comprising: 

prompting a user of the recipient to supply the identity information; 
decrypting the electronic mail with the identity information supplied by the 
user. 

4. The method according to claim 1, the method further comprising: 

asserting a control signal to disable options that are originally supported by the recipient 
if the confidentiality level satisfies a predefined confidentiality threshold. 

5. The method according to claim 4, wherein the control signal is a confidentiality- 
level-dependent control signal. 

13 



6. An electronic mail confidentiality preserver of an email client, comprising: 

an input-processing engine to limit abilities of a user of the email client to 

manipulate an electronic mail received by the email client based on a 

confidentiality level; and 
an encryption/decryption engine, coupled to the input-processing engine, to 

limit the user's access to a local storage if the user's access involves an 

electronic mail. 

7. The electronic mail confidentiality preserver according to claim 6, the input- 
processing engine further asserts a first control signal to disable options that are 
originally supported by the email client if the confidentiality level satisfies a 
predefined confidentiality threshold. 

8. The electronic mail confidentiality preserver according to claim 7, wherein the first 
control signal is a confidentiality-level-dependent control signal. 

9. The electronic mail confidentiality preserver according to claim 6, the input- 
processing engine further asserts a second control signal to invoke the 
encryption/decryption engine in response to the user's access. 

10. The electronic mail confidentiality preserver according to claim 6, the 
encryption/decryption engine further 

prompts the user for identity information; 

if the user's access to the local storage is to store the electronic mail, encrypts 
the electronic mail with the identity information; and 
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if the user's access to the local storage is to retrieve the electronic mail, 
decrypts the electronic mail with the identity information. 

A electronic mail client, comprising: 
a user interface; 
a communication engine; 
a local storage; 

and an electronic mail confidentiality preserver, coupled to the user interface, 
coupled to the communication engine and coupled to the local storage, 
wherein the electronic mail confidentiality preserver further comprises: 
an input-processing engine to limit abilities of a user of the 
email client to manipulate an electronic mail received 
by the email client based on a user-selected 
confidentiality level; and 
an encryption/decryption engine, coupled to the input- 
processing engine, to limit the user's access to the 
local storage if the user's access involves an 
electronic mail. 

The electronic mail client according to claim 11, wherein the user interface further 
comprises: 

a first set of confidentiaUty levels for the user to select from; and 
a second set of options to manipulate the electronic mail for the user to select 
from. 
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13. The electronic mail client according to claim 12, wherein the electronic mail 
confidentiality preserver further asserts a first control signal to the user interface to 
disable selected options from the second set of options if the confidentiality level 
satisfies a predefined confidentiality threshold. 

14. The electronic mail client according to claim 13, wherein the first control signal is a 
confidentiality-level-dependent control signal. 

15. The electronic mail client according to claim 12, the input-processing engine further 
asserts a second control signal to invoke the encryption/decryption engine in 
response to the user's access. 

16. The electronic mail client according to claim 12, the encryption/decryption engine 
further 

prompts the user for identity information; 

if the user's access to the local storage is to store the electronic mail, encrypts 
the electronic mail with the identity information; and 

if the user's access to the local storage is to retrieve the electronic mail, 
decrypts the electronic mail with the identity information. 

17. A machine readable medium including a plurality of instructions readable 
therefrom, the instructions, when executed by a computer system, cause the 
computer system to perform operations comprising: 

authenticating identity information of a recipient of an electronic mail; 
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restricting the recipient's ability to manipulate the electronic mail based on a 
confidentiality level established by a sender of the electronic mail; 

encrypting the electronic mail with the authenticated identity information if 
the recipient attempts to store the electronic mail to a local storage; and 

decrypting the electronic mail if the recipient attempts to retrieve the 
electronic mail from the local storage. 

The machine readable medium according to claim 17, wherein the identity 
information is a system password. 

The machine readable medium according to claim 17, the instructions further 
comprising: 

prompting a user of the recipient to supply the identity information; 
decrypting the electronic mail with the identity information supplied by the 
user. 

The machine readable medium according to claim 17, the instructions further 
comprising: 

asserting a control signal to disable options that are originally supported by 
the recipient if the confidentiality level satisfies a predefined 
confidentiality threshold. 

The machine readable medium according to claim 20, wherein the control signal is 
a confidentiality-level-dependent control signal. 
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